Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Internal Captive Portal does not load on apple captive network

This thread has been viewed 37 times
  • 1.  Internal Captive Portal does not load on apple captive network

    Posted Feb 23, 2024 12:38 AM

    Issue with internal captive portal loading when connecting to an ssid with captive portal enforced. We are using a publicly signed cert for our IAP from Sectigo. What am I doing wrong here? 



  • 2.  RE: Internal Captive Portal does not load on apple captive network

    Posted Feb 23, 2024 03:31 AM

    Is the captive portal working for other devices?

    Are you getting an IP address when you connect to the captive portal SSID in question? - You should be getting an IP address even if your page does not load.

    In a new tab, try putting in a random IP address as 2.2.2.2 and see if it redirects you to the expected page.

    What does your configuration look like for this SSID?



    ------------------------------
    /AJ
    ------------------------------



  • 3.  RE: Internal Captive Portal does not load on apple captive network

    Posted Feb 25, 2024 09:06 PM

    MacOS and IOS devices have this issue. 

    The devices are getting IPs from DHCP. 

    The SSID has a pre authentication role that enforces the internal captive portal. 




  • 4.  RE: Internal Captive Portal does not load on apple captive network

    EMPLOYEE
    Posted Feb 26, 2024 12:53 AM

    If the Apple device uses Safari or some other browser, does the page work properly?



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 5.  RE: Internal Captive Portal does not load on apple captive network

    Posted Feb 26, 2024 11:32 PM

    Yes, the page loads when opened by another browser. However we are trying to implement a T&C page with the internal captive portal, hence it is not practical if the user has to open the page on their browser even after they have been granted internet access. 




  • 6.  RE: Internal Captive Portal does not load on apple captive network

    EMPLOYEE
    Posted Feb 26, 2024 11:40 PM

    The point was to validate if the redirect to the captive portal and subsequent login action worked outside of the Apple CNA browser.

    Working outside of CNA = problem with CNA.

    Not working outside of CNA = configuration incorrect.

    Stay connected to the guest WLAN while dismissing the CNA browser, in a normal browser open a page like neverssl.com to test redirect.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 7.  RE: Internal Captive Portal does not load on apple captive network

    Posted Feb 27, 2024 06:55 AM

    Your response makes sense. However we need to play by apple's rules when it comes to integrating with their devices. 




  • 8.  RE: Internal Captive Portal does not load on apple captive network

    EMPLOYEE
    Posted Feb 27, 2024 10:26 AM

    Go ahead and open a case with TAC.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 9.  RE: Internal Captive Portal does not load on apple captive network

    Posted Mar 06, 2024 11:32 AM

    Any luck with TAC? I have the same issue.




  • 10.  RE: Internal Captive Portal does not load on apple captive network

    Posted Mar 06, 2024 07:20 PM

    Still gathering logs from controller, device, etc. 

    I suspect this was caused by an incorrect DNS set by the device, since the controller's domain name record can only be found on the local DNS. I found that not all connected devices face this CNA issue, it was also reported "intermittent" by the device owner. I have yet to come across another device in the network with the same issue. 




  • 11.  RE: Internal Captive Portal does not load on apple captive network

    EMPLOYEE
    Posted Mar 07, 2024 01:56 AM

    "incorrect DNS" for what?



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------